Extracted

• • Target
    3d5255d7d867f86f64da01b1a4fabbbeacc4c6b1d981a68e7dbbe2c1d9f25e9a
  • Size 45KB
  • SHA256 3d5255d7d867f86f64da01b1a4fabbbeacc4c6b1d981a68e7dbbe2c1d9f25e9a
  • MD5 2130532c50204787b67d1a7792baa3f5
  • SHA1 30b4be7bf483cce0b905a81a645a92c445115ac5
  • SHA512 74613222203e3fa3973105c3edf3edb6480f2edb53ee4e428824f27f49324eda989ba5da68791b0791466649cd79474f1799223d1d974d272c73feee0d09a1e4
  • SSDEEP 768:MuLAZTnAkuSWUYzG8mo2qFG9xY6aZOOPIrzjb5gS3iERjrlKyhdJPYGAHBDZEx:MuLAZTnbg2Ds/O3r3bWSS+1Ky7JghdEx
  • TLSH
    T1B5232B003BE9822BF2BE4F78ACF26245467BE6637603D5491CC451DB5713BC68A426FE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defaultdefense_evasiondiscoveryexecutionasyncratpersistencerat

  • Async RAT payload

    rat

  • Family: AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2